Secure desktop parameters?

Hi, I've read about the Enterprise version (not out yet?) and its capabilities for creating secure desktops. I'm researching ways to lock down the desktops on our PCs in our Internet cafe and am curious as to just how locked down the desktops can be. I am most interested in blocking a user's ability to install programs. How will this capability be managed? Thanks

Locked Post

Advanced Search

Watch this post

Do not email me updates for this post Email me updates for this post

Successfully updated karma reason!

NightTrainthedark

Join Date 07/2003

+255

Not sure exactly how good this works but... the ability to install programs and limit access to the guts of the pc can be done by using Guest accounts. You can use passwords for admin accounts to keep people out. Just a thought.

Successfully updated karma reason!

Corky_O

Join Date 04/2004

If you are running XP Pro, you can gain a certain amount of control by using the group policy service (Run > gpedit.msc > user configuration > administrative templates > double-click an entry > select enable).

Hackers will make it difficult to lock down the desktops. You will need to disable access to the command prompt, as well as enabling (or creating policies) to prevent removable media installations, access through file structures, etc.

A combination of the group policy service and removing any access to run command and command prompt access would at least make a significant road block to the fly-by hacker.

Here is a link for disabling Windows key shortcuts Link

Successfully updated karma reason!

Thanks for the Windows tips. Unfortunately most of the systems are XP Home. We're looking into some different cyber cafe software which might do the trick, but I'm a big fan of Object Desktop and was basically curious as to how a secure desktop is created, where the differences are between it and Windows' security policies, etc.

Successfully updated karma reason!

Sign Up or Login and this ad disappears!
There are many great features available to you once you register. Sign Up for a free account and browse the forums without ads.

Corky_O

Join Date 04/2004

Perhaps a combination of Night Trains suggestion on creating a guest account to limit the ability to install softwares, running the REGINI file to disable the Windows key shortcuts, and something like DesktopX to create a desktop that does not have any links to system commands.

You could create a wharf object with say things like:

- Internet browser
- Paint
- Notepad
- Calculator
- Games
- Printer

Perhaps include a clock, calendar, weather widget.

I am sure you could design something, and make some settings in XP Home that would minimize, if not remove any type of moderate hacker threat. If a true hacker shows up, there is probably little you could do to prevent him/her from poking around anyway - without a real network administrative OS installed.

Removing the Windows key shortcuts will prevent access to the Start Menu, Explorer, Search, and Run directly from the keyboard.

Hopefully someone with some ideas on creating a desktop with Stardock products will drop by.

Successfully updated karma reason!